Credit: Ali Sahib, Chronicle.lu
On Monday 20 April 2026, the Grand Ducal Police took part in a coordinated international operation targeting distributed denial-of-service (DDoS) attacks, during which authorities issued more than 75,000 warning messages, arrested four suspects, took 53 domains offline and executed 25 search warrants.
Carried out in collaboration with Europol, the week-long action brought together 21 countries.
In Luxembourg, the operation included a house search conducted on Monday 13 April 2026 in Diekirch by Luxembourg’s Judicial Police, acting on the instructions of the public prosecutor and an investigating judge. Computer equipment was seized as part of a preliminary investigation into suspected involvement in DDoS attacks. The Diekirch Public Prosecutor’s Office also attended the search operations.
The investigation into this case is ongoing, and the principle of the presumption of innocence is recalled.
The police reminded that disrupting IT services constitutes a criminal offence punishable under the Penal Code.
Under Article 509-2, anyone who intentionally interferes with or disrupts the functioning of an automated data processing or transmission system, in disregard of the rights of others, faces a prison sentence of between three months and three years and a fine of €1,250 to €12,500, or one of these penalties.
The same applies to equipment and programs intended to cause such disruptions. Under Article 509-5, anyone who, with fraudulent intent, produces, sells, obtains, possesses, imports, distributes or makes available a computer device intended to commit such offences, or any electronic key enabling unauthorised access to all or part of a system, is liable to a prison sentence of between four months and five years and a fine of €1,250 to €30,000.
